@askexenow/exe-os 0.9.201 → 0.9.203

package/release-notes.json

@@ -1,10 +1,12 @@
 {
-  "current": "0.9.201",
+  "current": "0.9.203",
   "notes": {
-    "0.9.201": {
-      "version": "0.9.201",
+    "0.9.203": {
+      "version": "0.9.203",
       "date": "2026-06-03",
       "features": [
+        "expand orchestration measurement to full event coverage",
+        "DB Authority Phase 1 — task claim and liveness schema",
         "browser prompt injection defense + persistent cookie jar",
         "wire exe-erp into VPS stack (init-db, cloudflared, manifest, docs)",
         "consolidate registry.askexe.com → update.askexe.com as primary registry (#51)",
@@ -27,11 +29,13 @@
         "encrypted daily VPS backups with R2 cloud upload",
         "conversation history import — parser + MCP tool + CLI",
         "add vps-backup + vps-health-gate scripts with stack-update integration",
-        "add update_bug_report + update_feature_request MCP tools",
-        "VPS guardrails — Postgres backup cron + post-deploy health gate",
-        "co-occurrence edges + graph backfill script"
+        "add update_bug_report + update_feature_request MCP tools"
       ],
       "fixes": [
+        "task test mock returns correct shape for createOrRefreshResumeTask",
+        "embed RAM gate 16GB, paste-buffer -p, task dispatch repo + surfacing",
+        "full shard schema parity with main DB",
+        "ensure orchestration metrics CLI exits",
         "database.ts import fixes for corrupt backup cleanup",
         "add keywords column to shard schema + cleanup corrupt DB backups",
         "add self_heal_restart to DaemonEvent type + orchestration event tracking",
@@ -52,11 +56,7 @@
         "enable GoTrue email auth by default in setup template",
         "intercom signal path in packaged source — ships to customers on npm install",
         "intercom signal path + registry consolidated to update.askexe.com",
-        "4 customer P2 bugs — CLI passthrough + agent casing + clipboard (#50)",
-        "MCP pressure eviction evicts ONE session, not all",
-        "GHCR registry escape hatch + feature request 400 payload fix",
-        "WS client graceful failure on CF 1101 + capped backoff",
-        "3 of 4 customer P2 bugs — CLI passthrough + agent casing + clipboard"
+        "4 customer P2 bugs — CLI passthrough + agent casing + clipboard (#50)"
       ],
       "security": [
         "fix shell injection, SSRF, socket leaks, backup validation",
@@ -73,6 +73,12 @@
         "fix 4 pricing tier bypass vulnerabilities (audit F1-F4)"
       ],
       "other": [
+        "bump to v0.9.203",
+        "capture orchestration measurement blind spots",
+        "review push event orchestration roadmap",
+        "add full 4-phase DB Authority roadmap to ARCHITECTURE.md",
+        "update release-notes for v0.9.202 + remove stale lock file",
+        "bump to v0.9.202",
         "bump to v0.9.201",
         "bump to v0.9.200",
         "design orchestration measurement baseline",
@@ -91,18 +97,12 @@
         "bump to 0.9.192",
         "bump to 0.9.191",
         "bump to 0.9.189",
-        "bump to 0.9.188 — HYGO stack-update blockers fixed",
-        "bump to 0.9.187",
-        "bump to 0.9.186 — cross-session dispatch fix",
-        "release: bump exe-os image to v0.9.185 in stack manifest",
-        "bump to 0.9.185",
-        "bump to 0.9.184",
-        "bump to 0.9.183"
+        "bump to 0.9.188 — HYGO stack-update blockers fixed"
       ],
       "migration_notes": []
     },
-    "0.9.200": {
-      "version": "0.9.200",
+    "0.9.202": {
+      "version": "0.9.202",
       "date": "2026-06-03",
       "features": [
         "browser prompt injection defense + persistent cookie jar",
@@ -132,6 +132,11 @@
         "co-occurrence edges + graph backfill script"
       ],
       "fixes": [
+        "embed RAM gate 16GB, paste-buffer -p, task dispatch repo + surfacing",
+        "full shard schema parity with main DB",
+        "ensure orchestration metrics CLI exits",
+        "database.ts import fixes for corrupt backup cleanup",
+        "add keywords column to shard schema + cleanup corrupt DB backups",
         "add self_heal_restart to DaemonEvent type + orchestration event tracking",
         "shard circuit breaker, event loop self-healing, heap cap, intercom reason",
         "add generate-hook-manifest to tsup entries — unblocks publish gate",
@@ -151,12 +156,7 @@
         "intercom signal path in packaged source — ships to customers on npm install",
         "intercom signal path + registry consolidated to update.askexe.com",
         "4 customer P2 bugs — CLI passthrough + agent casing + clipboard (#50)",
-        "MCP pressure eviction evicts ONE session, not all",
-        "GHCR registry escape hatch + feature request 400 payload fix",
-        "WS client graceful failure on CF 1101 + capped backoff",
-        "3 of 4 customer P2 bugs — CLI passthrough + agent casing + clipboard",
-        "remove auto-close on session end (source persisted this time)",
-        "parallel Tom isolation — task-scoped branches + multi-instance task lookup"
+        "MCP pressure eviction evicts ONE session, not all"
       ],
       "security": [
         "fix shell injection, SSRF, socket leaks, backup validation",
@@ -173,6 +173,8 @@
         "fix 4 pricing tier bypass vulnerabilities (audit F1-F4)"
       ],
       "other": [
+        "bump to v0.9.202",
+        "bump to v0.9.201",
         "bump to v0.9.200",
         "design orchestration measurement baseline",
         "capture tmux hardening path",
@@ -195,15 +197,13 @@
         "bump to 0.9.186 — cross-session dispatch fix",
         "release: bump exe-os image to v0.9.185 in stack manifest",
         "bump to 0.9.185",
-        "bump to 0.9.184",
-        "bump to 0.9.183",
-        "bump to 0.9.181 — BEAM 3-mode + query expansion"
+        "bump to 0.9.184"
       ],
       "migration_notes": []
     },
-    "0.9.199": {
-      "version": "0.9.199",
-      "date": "2026-06-02",
+    "0.9.201": {
+      "version": "0.9.201",
+      "date": "2026-06-03",
       "features": [
         "browser prompt injection defense + persistent cookie jar",
         "wire exe-erp into VPS stack (init-db, cloudflared, manifest, docs)",
@@ -232,6 +232,10 @@
         "co-occurrence edges + graph backfill script"
       ],
       "fixes": [
+        "database.ts import fixes for corrupt backup cleanup",
+        "add keywords column to shard schema + cleanup corrupt DB backups",
+        "add self_heal_restart to DaemonEvent type + orchestration event tracking",
+        "shard circuit breaker, event loop self-healing, heap cap, intercom reason",
         "add generate-hook-manifest to tsup entries — unblocks publish gate",
         "remove unused cleanupExpiredJars import — fixes TS6133 blocking publish",
         "remove dead actualRuntime variable — fixes TS6133 blocking publish",
@@ -252,11 +256,7 @@
         "MCP pressure eviction evicts ONE session, not all",
         "GHCR registry escape hatch + feature request 400 payload fix",
         "WS client graceful failure on CF 1101 + capped backoff",
-        "3 of 4 customer P2 bugs — CLI passthrough + agent casing + clipboard",
-        "remove auto-close on session end (source persisted this time)",
-        "parallel Tom isolation — task-scoped branches + multi-instance task lookup",
-        "downgrade multi-coordinator hard-fail to warning",
-        "daemon RSS reconnect + review push notify + hot_entities timestamp"
+        "3 of 4 customer P2 bugs — CLI passthrough + agent casing + clipboard"
       ],
       "security": [
         "fix shell injection, SSRF, socket leaks, backup validation",
@@ -273,6 +273,12 @@
         "fix 4 pricing tier bypass vulnerabilities (audit F1-F4)"
       ],
       "other": [
+        "bump to v0.9.201",
+        "bump to v0.9.200",
+        "design orchestration measurement baseline",
+        "capture tmux hardening path",
+        "add orchestration counterargument",
+        "audit tmux orchestration architecture",
         "bump to v0.9.199",
         "remove registry.askexe.com references — fully consolidated to update.askexe.com",
         "bump to 0.9.198 — coordinator reaper guard",
@@ -291,19 +297,13 @@
         "release: bump exe-os image to v0.9.185 in stack manifest",
         "bump to 0.9.185",
         "bump to 0.9.184",
-        "bump to 0.9.183",
-        "bump to 0.9.181 — BEAM 3-mode + query expansion",
-        "bump to 0.9.180 — complete worktree isolation",
-        "bump to 0.9.179",
-        "bump to 0.9.178 — Bob's null fixes merged",
-        "bump to 0.9.177",
-        "bump to 0.9.176"
+        "bump to 0.9.183"
       ],
       "migration_notes": []
     },
-    "0.9.198": {
-      "version": "0.9.198",
-      "date": "2026-06-02",
+    "0.9.200": {
+      "version": "0.9.200",
+      "date": "2026-06-03",
       "features": [
         "browser prompt injection defense + persistent cookie jar",
         "wire exe-erp into VPS stack (init-db, cloudflared, manifest, docs)",
@@ -332,6 +332,8 @@
         "co-occurrence edges + graph backfill script"
       ],
       "fixes": [
+        "add self_heal_restart to DaemonEvent type + orchestration event tracking",
+        "shard circuit breaker, event loop self-healing, heap cap, intercom reason",
         "add generate-hook-manifest to tsup entries — unblocks publish gate",
         "remove unused cleanupExpiredJars import — fixes TS6133 blocking publish",
         "remove dead actualRuntime variable — fixes TS6133 blocking publish",
@@ -354,9 +356,7 @@
         "WS client graceful failure on CF 1101 + capped backoff",
         "3 of 4 customer P2 bugs — CLI passthrough + agent casing + clipboard",
         "remove auto-close on session end (source persisted this time)",
-        "parallel Tom isolation — task-scoped branches + multi-instance task lookup",
-        "downgrade multi-coordinator hard-fail to warning",
-        "daemon RSS reconnect + review push notify + hot_entities timestamp"
+        "parallel Tom isolation — task-scoped branches + multi-instance task lookup"
       ],
       "security": [
         "fix shell injection, SSRF, socket leaks, backup validation",
@@ -373,6 +373,12 @@
         "fix 4 pricing tier bypass vulnerabilities (audit F1-F4)"
       ],
       "other": [
+        "bump to v0.9.200",
+        "design orchestration measurement baseline",
+        "capture tmux hardening path",
+        "add orchestration counterargument",
+        "audit tmux orchestration architecture",
+        "bump to v0.9.199",
         "remove registry.askexe.com references — fully consolidated to update.askexe.com",
         "bump to 0.9.198 — coordinator reaper guard",
         "bump to 0.9.197 — TTL fix + registry consolidation + TS fixes",
@@ -391,20 +397,16 @@
         "bump to 0.9.185",
         "bump to 0.9.184",
         "bump to 0.9.183",
-        "bump to 0.9.181 — BEAM 3-mode + query expansion",
-        "bump to 0.9.180 — complete worktree isolation",
-        "bump to 0.9.179",
-        "bump to 0.9.178 — Bob's null fixes merged",
-        "bump to 0.9.177",
-        "bump to 0.9.176",
-        "bump to 0.9.175"
+        "bump to 0.9.181 — BEAM 3-mode + query expansion"
       ],
       "migration_notes": []
     },
-    "0.9.197": {
-      "version": "0.9.197",
+    "0.9.199": {
+      "version": "0.9.199",
       "date": "2026-06-02",
       "features": [
+        "browser prompt injection defense + persistent cookie jar",
+        "wire exe-erp into VPS stack (init-db, cloudflared, manifest, docs)",
         "consolidate registry.askexe.com → update.askexe.com as primary registry (#51)",
         "nginx /v2/ route for Docker registry proxy on update.askexe.com",
         "consolidate registry into update.askexe.com — license key = pull auth",
@@ -427,11 +429,19 @@
         "add vps-backup + vps-health-gate scripts with stack-update integration",
         "add update_bug_report + update_feature_request MCP tools",
         "VPS guardrails — Postgres backup cron + post-deploy health gate",
-        "co-occurrence edges + graph backfill script",
-        "write-time entity/relationship extraction from memory text",
-        "parallel retrieval (FTS+graph+embed) with _source attribution"
+        "co-occurrence edges + graph backfill script"
       ],
       "fixes": [
+        "add generate-hook-manifest to tsup entries — unblocks publish gate",
+        "remove unused cleanupExpiredJars import — fixes TS6133 blocking publish",
+        "remove dead actualRuntime variable — fixes TS6133 blocking publish",
+        "isolate Metal/GPU ops in worker process — reranker dispose crash was killing daemon",
+        "remove remaining /exe-intercom invocations + update tests",
+        "replace /exe-intercom skill invocation with plain text prompt",
+        "remove ALL --strict-mcp-config usage — was blocking /exe-intercom in session MCP config too",
+        "tsup outputs to dist directly — kill dist-next migration shim",
+        "drop --strict-mcp-config from lean MCP — was blocking skill loading (/exe-intercom)",
+        "zombie agent reaper never kills coordinator/exe session processes",
         "typecheck errors blocking publish — async embed alert + dead code cleanup",
         "session TTL uses registry registeredAt instead of tmux session_created",
         "CRM auth defaults + benchmark beam.ts updates",
@@ -446,17 +456,7 @@
         "remove auto-close on session end (source persisted this time)",
         "parallel Tom isolation — task-scoped branches + multi-instance task lookup",
         "downgrade multi-coordinator hard-fail to warning",
-        "daemon RSS reconnect + review push notify + hot_entities timestamp",
-        "HYGO stack-update blockers — volume regex + memory_audit --fix",
-        "spawn CWD cross-project contamination + identity load ordering",
-        "MCP hot-reload checks agent context for COO role, not just env var",
-        "eliminate cross-session dispatch bug in create_task",
-        "bug/feature report upstream updates — PATCH→POST with action field",
-        "strip stale X-Exe-Session from global config + guard against re-adding",
-        "BEAM CLaRa — direct JSON response instead of tool_use, bump max_tokens",
-        "BEAM CLaRa benchmark — correct endpoint + configurable model",
-        "MCP session dedup false positive + BEAM CLaRa benchmark mode",
-        "prevent false-positive duplicate eviction for multi-coordinator sessions"
+        "daemon RSS reconnect + review push notify + hot_entities timestamp"
       ],
       "security": [
         "fix shell injection, SSRF, socket leaks, backup validation",
@@ -473,6 +473,9 @@
         "fix 4 pricing tier bypass vulnerabilities (audit F1-F4)"
       ],
       "other": [
+        "bump to v0.9.199",
+        "remove registry.askexe.com references — fully consolidated to update.askexe.com",
+        "bump to 0.9.198 — coordinator reaper guard",
         "bump to 0.9.197 — TTL fix + registry consolidation + TS fixes",
         "update all manifest images to update.askexe.com + compose + beam tuning",
         "bump to 0.9.196",
@@ -494,10 +497,7 @@
         "bump to 0.9.179",
         "bump to 0.9.178 — Bob's null fixes merged",
         "bump to 0.9.177",
-        "bump to 0.9.176",
-        "bump to 0.9.175",
-        "bump to 0.9.174 — Bob's daemon hardening merged",
-        "bump to 0.9.173"
+        "bump to 0.9.176"
       ],
       "migration_notes": []
     }